CVE-2007-5519

Unspecified vulnerability in the Oracle Portal component in Oracle Application Server 9.0.4.3 and 10.1.2.0.2, and Collaboration Suite 10.1.2, has unknown impact and remote attack vectors, aka AS04.

CVSS v2.0 7.5 HIGH

7.5^/10

CVSS v2.0 : HIGH

Vector : AV:N/AC:L/Au:N/C:P/I:P/A:P

Exploitability : 10.0 / Impact : 6.4

Access Vector NETWORK

Access Complexity LOW

Authentication NONE

Confidentiality Impact PARTIAL

Integrity Impact PARTIAL

Availability Impact PARTIAL

References

Link	Resource
http://www.securitytracker.com/id?1018823
http://secunia.com/advisories/27251	Vendor Advisory
http://www.us-cert.gov/cas/techalerts/TA07-290A.html	US Government Resource
http://secunia.com/advisories/27409
http://www.vupen.com/english/advisories/2007/3524
http://www.vupen.com/english/advisories/2007/3626
http://marc.info/?l=bugtraq&m=119332677525918&w=2
http://www.oracle.com/technetwork/topics/security/cpuoct2007-092913.html

Advertisement

Configurations

Configuration 1 (hide)

OR	cpe:2.3:a:oracle:application_server:9.0.4.3:::::::*
	cpe:2.3:a:oracle:collaboration_suite:10.1.2:::::::*

Information

Published : 2007-10-17 16:17

Updated : 2012-10-22 19:36

NVD link : CVE-2007-5519

Mitre link : CVE-2007-5519

JSON object : View

CWE

NVD-CWE-noinfo

Advertisement

Products Affected

oracle

application_server
collaboration_suite

{"cve": {"data_type": "CVE", "references": {"reference_data": [{"url": "http://www.securitytracker.com/id?1018823", "name": "1018823", "tags": [], "refsource": "SECTRACK"}, {"url": "http://secunia.com/advisories/27251", "name": "27251", "tags": ["Vendor Advisory"], "refsource": "SECUNIA"}, {"url": "http://www.us-cert.gov/cas/techalerts/TA07-290A.html", "name": "TA07-290A", "tags": ["US Government Resource"], "refsource": "CERT"}, {"url": "http://secunia.com/advisories/27409", "name": "27409", "tags": [], "refsource": "SECUNIA"}, {"url": "http://www.vupen.com/english/advisories/2007/3524", "name": "ADV-2007-3524", "tags": [], "refsource": "VUPEN"}, {"url": "http://www.vupen.com/english/advisories/2007/3626", "name": "ADV-2007-3626", "tags": [], "refsource": "VUPEN"}, {"url": "http://marc.info/?l=bugtraq&m=119332677525918&w=2", "name": "SSRT061201", "tags": [], "refsource": "HP"}, {"url": "http://www.oracle.com/technetwork/topics/security/cpuoct2007-092913.html", "name": "http://www.oracle.com/technetwork/topics/security/cpuoct2007-092913.html", "tags": [], "refsource": "CONFIRM"}]}, "data_format": "MITRE", "description": {"description_data": [{"lang": "en", "value": "Unspecified vulnerability in the Oracle Portal component in Oracle Application Server 9.0.4.3 and 10.1.2.0.2, and Collaboration Suite 10.1.2, has unknown impact and remote attack vectors, aka AS04."}]}, "problemtype": {"problemtype_data": [{"description": [{"lang": "en", "value": "NVD-CWE-noinfo"}]}]}, "data_version": "4.0", "CVE_data_meta": {"ID": "CVE-2007-5519", "ASSIGNER": "cve@mitre.org"}}, "impact": {"baseMetricV2": {"cvssV2": {"version": "2.0", "baseScore": 7.5, "accessVector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "authentication": "NONE", "integrityImpact": "PARTIAL", "accessComplexity": "LOW", "availabilityImpact": "PARTIAL", "confidentialityImpact": "PARTIAL"}, "severity": "HIGH", "impactScore": 6.4, "obtainAllPrivilege": false, "exploitabilityScore": 10.0, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}}, "publishedDate": "2007-10-17T23:17Z", "configurations": {"nodes": [{"children": [], "operator": "OR", "cpe_match": [{"cpe23Uri": "cpe:2.3:a:oracle:application_server:9.0.4.3:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true}, {"cpe23Uri": "cpe:2.3:a:oracle:collaboration_suite:10.1.2:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true}]}], "CVE_data_version": "4.0"}, "lastModifiedDate": "2012-10-23T02:36Z"}